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IN THE CLAIMS 

1 . [Amended] A method for synchronizing state information in a security gateway 
cluster, said security gateway cluster comprising at least two nodes, said method: 

- storing state information in a first node and in at least a second node of said at 
5 least two nodes in said security gateway cluster, 

- state information stored in said first node comprises common state information 
and node-specific state information, 

- defining for each node belonging to said security gateway cluster a node-specific 
backup group comprising at least one node-specific backup node, 

10 - synchronizing said state information in said security gateway cluster by sending 
state information from said first node to at least said second node of said at least 
two nodes, 

- detecting in said security gateway cluster a predetermined irregularly occurriim 
a c I i u i v frn^tlt^ 

15 - initiating said step of synchronization of state information as a response to said 
predetermined irregularly occurring action, said predetermined irregularly occurrin g 
action including a tka^iod modification of state information so that modification of 
common state information initiates synchronization of common state information to 
all other nodes of said security gateway cluster, and modification of node-specific 

20 state information initiates synchronization of node-specific state information to 
nodes belonging to backup group of said first node. 

2. [Previously amended] A method according to claim 1, wherein said 
predetermined action is modification of said state information stored in said first 

25 node. 

3. [Previously amended] A method according to claim 2, wherein in the step of 
synchronizing state information only modified part of the state information stored in 
said first node is sent. 

4. [Previously amended] A method according to claim 3, wherein the modified part 
30 of the state information is sent from said first node to all other nodes of said security 

gateway cluster. 

5. [Previously amended] A method according to claim 4, wherein the modified part 
of the state information relates to a certain protocol, authentication information, 
virtual private network parameters or intrusion detection system. 
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6. [Previously amended] A method according to claim 1, wherein in the step of 
synchronizing state information all state information stored in said first node is sent. 

7. [Previously amended] A method according to claim 1, further comprising the 
step of: 

5 - periodically synchronizing state information from said first node to at least a 
second node. 

8. [Cancelled] 

9. [Cancelled] 

10. [Previously amended] A method according to claim 1, wherein said 

10 predetermined action affects number of nodes in said security gateway cluster, said 
method further comprising the step of: 

- redefining for at least one node belonging to said security gateway cluster a 
backup group comprising at least one backup node. 

11. [Previously amended] A method according to claim 1, wherein said 
1 5 predetermined action is said first node failing to continue normal operation. 

12. [Previously amended] A method according to claim 1, wherein said 
predetermined action is said second node requesting for state information. 

13. [Previously amended] A method according to claim 1, wherein said 
predetermined action is said first node initiating a transition to offline state. 

20 14. [Previously amended] A method according to claim 1, wherein said 
predetermined action is handling of data packets relating to a communication 
session in at least two nodes, one of them being said first node, and in that said 
synchronization of state information is performed between at least said at least two 
nodes. 

25 15. [Previously amended] A method according to claim 1, wherein said 
predetermined action is a receipt of a data packet in said first node of said security 
gateway cluster, said data packet relating to a command to open a new connection 
via said security gateway cluster. 

16. [Previously amended] A method according to claim 15, further comprising the 
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- delaying sending of said data packet from said first node until said synchronization 
of state information is performed. 

1 7. [Previously amended] A method according to claim 1 , further comprising the 
step of: 

5 - delaying sending of a plurality of data packets from said first node until said 
synchronization of state information is performed. 

18. [Cancelled] 

19. [Cancelled] 

20. [Cancelled] 
10 21. [Cancelled] 

22. [Cancelled] 

23. [Cancelled] 

24. [Cancelled] 

25. [Cancelled] 
15 26. [Cancelled] 

27. [Cancelled] 

28. [Cancelled] 

29. [Cancelled] 

30. [Cancelled] 
20 31. [Cancelled] 

32. [Cancelled] 

33. [Amended] A node of a security gateway cluster comprising 

- means for storing state information of said node, said state information comprising 
common state information and node-specific state information, 
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- means for defining for said node a node-specific backup group of nodes 
comprising at least one node-specific backup node, 

- means for synchronizing said state information in said security gateway cluster by 
sending state information from said node to at least one other node in said security 

5 gateway cluster, 

- means for detecting a predetermined irregularly occurring action modifiealiun o4' 

- means for triggering said synchronization means as a response to said 
predetermined irregularly occurring action, said predetermined irregularly occurring 

10 action including a d^nMed-modification of state information so that modification of 
common state information initiates synchronization of common state information to 
all other nodes of said security gateway cluster, and modification of node-specific 
state information initiates synchronization of node-specific state information to 
nodes belonging to backup group of said node. 

15 

34. [Amended] A security gateway cluster having a plurality of nodes, at least one 
node comprising 

- means for storing state information of said node, said state information comprising 
common state information and node-specific state information, 

20 - means for defining for said node a node-specific backup group of nodes 
comprising at least one node-specific backup node, 

- means for synchronizing said state information in said security gateway cluster by 
sending state information from said node to at least one other node in said security 
gateway cluster, 

25 - means for detecting a predetermined irregularly occurring action modificat i on o4' 

said-fria- t c i nfo rmaHeH, 

- means for triggering said synchronization means as a response to said 
predetermined irrcgularK occurring action, said predetermined irregularly occurring 
action including a dt^^ted-modification of state information so that modification of 

30 common state information initiates synchronization of common state information to 
all other nodes of said security gateway cluster, and modification of node-specific 
state information initiates synchronization of node-specific state information to 
nodes belonging to backup group of said node. 

35 35. [Amended] A computer readable medium containing a a computer-executable 
configured to perform at least the following routines for synchronizing state 
information in a security gateway cluster of at least two nodes when said program 
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- storing state information in a said node and in at least a second node in said 
security gateway cluster, said stored state information stored comprising common 
state information and node-specific state information, 

- defining for said node a node-specific backup group of nodes comprising at least 
5 one node-specific backup node, 

- synchronizing said state information in said security gateway cluster by sending 
state information from said node to at least said second node, 

- detecting in said security gateway cluster a predetermined irregularly occurring 
action bh-k4 i^H^^^Hl^xit^if i lor m a 1 i o n, 

10 - initiating said step of synchronization of state information as a response to said 
predetermined irregularly occurring action, said predetermined irregularly occurring 
action including a dtrk^ekH^-modification of state information so that modification of 
common state information initiates synchronization of common state information to 
all other nodes of said security gateway cluster, and modification of node-specific 

15 state information initiates synchronization of node-specific state information to 
nodes belonging to backup group of said node. 



